file[.]exe | Triage™

General

Target
file.exe
Size 340KB
Sample221011-psb9xsebb3
SHA256 31d3989bd568a29e211f378c9812e51ac312d4b0be152a8b4e102204dda1fd7f
MD5 b2a861f82ac08a477f4d0d979b7ab14d
SHA1 3a894274686b1b3034f7b145449fd0b1a328a870
SHA512 008258b11c803565249f9c951ccd4ffc326575abafefa8cc0704ede771faacff9813dcdbf2799d895c230a50efafc67d6c1ea7a700b233ac9fab8705341f824a
SSDEEP 6144:512KuJLqBKVeCaB0haTbCGATMElxPC7+eNI5+IxmD+xKTE:5gKuJAKACdYTbChMIxPCRq5+ND1E
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 340KB

file.exe

IMPHASH 4db5fa00d6d53e828ab0bf90238303f5
SHA256 31d3989bd568a29e211f378c9812e51ac312d4b0be152a8b4e102204dda1fd7f
MD5 b2a861f82ac08a477f4d0d979b7ab14d
SHA1 3a894274686b1b3034f7b145449fd0b1a328a870
SHA512 008258b11c803565249f9c951ccd4ffc326575abafefa8cc0704ede771faacff9813dcdbf2799d895c230a50efafc67d6c1ea7a700b233ac9fab8705341f824a
SSDEEP 6144:512KuJLqBKVeCaB0haTbCGATMElxPC7+eNI5+IxmD+xKTE:5gKuJAKACdYTbChMIxPCRq5+ND1E
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

40518

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesA ReadFile ReadConsoleA GetVolumeInformationA GetComputerNameW LocalFree InterlockedDecrement GetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW FindCloseChangeNotification EnumSystemCodePagesW FindNextFileA CopyFileExA MoveFileWithProgressA VerifyVersionInfoW LocalSize DosDateTimeToFileTime DebugBreak GlobalGetAtomNameA IsBadReadPtr FindResourceW GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthA DeleteVolumeMountPointA GetPrivateProfileStructA GetOEMCP CreateIoCompletionPort CopyFileW InterlockedPopEntrySList WriteConsoleA GetBinaryTypeA WriteConsoleOutputA GetCommandLineA CreateActCtxW FormatMessageW GetModuleHandleA EnterCriticalSection GetComputerNameA GetStringTypeExW OpenMutexA LocalFlags FindResourceA RtlCaptureContext InterlockedCompareExchange InitializeCriticalSectionAndSpinCount GetPrivateProfileStructW DeleteFiber InterlockedExchange EnumDateFormatsW EnumCalendarInfoA GetConsoleAliasExesLengthW OpenSemaphoreA InterlockedIncrement GetNamedPipeHandleStateW UnregisterWait LocalAlloc GetLogicalDriveStringsA SetLastError lstrcpynW LoadLibraryA WideCharToMultiByte MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP WriteConsoleW CreateFileA CloseHandle FlushFileBuffers

user32

CharUpperBuffA

advapi32

RevertToSelf

Sharing